Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 11th August 2006, 21:36
naruto naruto is offline
Junior Member
 
Join Date: Aug 2006
Posts: 13
Thanks: 0
Thanked 0 Times in 0 Posts
Post User rights question.

Hello. Wonderful job. I'm just amazed.

I've installed Ispconfig and everything is working as expected.

I just found something that I don't know if it should work that way or not. So, just before playing with your files I want to know it it is a normal behaviour.

This is what i've created to show this issue:
HTML Code:
Host server: server.example.com       
          IspConfig users: 
                   Admin: -> admin
                        Client: client_dom1
                        Site: Site 1.
	            *****www.domain1.com
                         *****users: dom1_us1; dom1_us2
                   Reseller -> res
                         Client: client_dom2
                         Site: Site 2.
	             *****www.domain2.com
	             *****2 users: dom2_us1; dom2_us2
Results on users login for isp users:
On host server:
(server.example.com:81/)
expected access: ALL
Real access: ALL
On Site 1
(www.domain1.com:81/)
expected access: admin, client_dom1
Real access: ALL
On Site 2
(www.domain2.com:81/)
expected access: admin, res, client_dom1
Real access: ALL

Results on users login for system users (same with ftp):
(server.example.com:81/mailuser/)
(server.example.com:81/webmail/)
(server.example.com:81/phpmyadmin/)
expected access: only users on server page.
real access: ALL users including those from others sites.
(www.domain1.com:81/mailuser/)
(www.domain1.com:81/webmail/)
(www.domain1.com:81/phpmyadmin/)
expected access: only users of this domain dom1_us1, dom1_us2
real access: ALL users including those from others sites.
(www.domain2.com:81/mailuser/)
(www.domain2.com:81/webmail/)
(www.domain2.com:81/phpmyadmin/)
expected access: only users of this domain dom2_us1, dom2_us2
real access: ALL users including those from others sites.

Although it shows the right content after login, is really weird to find someone from domain 2 making a correct access (to ftp or webmail)
from the interfaces of domain 1.

Once again, is it normal? or just a problem of my configuration.
Thanks a lot.
Reply With Quote
Sponsored Links
  #2  
Old 12th August 2006, 12:07
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 36,380
Thanks: 833
Thanked 5,481 Times in 4,315 Posts
Default

That is normal. The ISPConfig interface listens on port 81 on all IP addresses of your server. The access is restricted on the user password combinations.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 27th August 2006, 20:54
naruto naruto is offline
Junior Member
 
Join Date: Aug 2006
Posts: 13
Thanks: 0
Thanked 0 Times in 0 Posts
Thumbs up Thanks

Thanks for your answer Till.
I tried to add some fields to database to restrict access also on website domain, but to do it a needed to modify general scripts (Insert database functions / in add user, reseller, client) so I decided to leave it that way.

Could this be a new feature in next release?

Thank you so much.
Reply With Quote
  #4  
Old 28th August 2006, 11:00
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,743 Times in 2,577 Posts
Default

Quote:
Originally Posted by naruto
Could this be a new feature in next release?
What exactly?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 28th August 2006, 18:16
naruto naruto is offline
Junior Member
 
Join Date: Aug 2006
Posts: 13
Thanks: 0
Thanked 0 Times in 0 Posts
Smile

Hello Falko.

The new feature i'm talking about is to restrict Ispconfig interface access and ftp not only on user password combination but also on website domain.
I explained this better on my first post.

Thanks once again.
Reply With Quote
  #6  
Old 28th August 2006, 18:57
fobicodam fobicodam is offline
Senior Member
 
Join Date: Apr 2006
Location: Argentina
Posts: 346
Thanks: 0
Thanked 1 Time in 1 Post
Send a message via MSN to fobicodam
Default

You say, to check the hostname to allow users to login or not? i dont know.. when some client domain isnt pointing to the webserver its usefull to login from the main address or with ip access.. users dont need to know everybody can login from another hostname, anyway the see the right content inside..
Reply With Quote
  #7  
Old 28th August 2006, 21:56
naruto naruto is offline
Junior Member
 
Join Date: Aug 2006
Posts: 13
Thanks: 0
Thanked 0 Times in 0 Posts
Thumbs up

Hi fabicodam.

It is not a critical issue. Just a little feature to make things better.

Thanks.
Reply With Quote
  #8  
Old 29th August 2006, 14:08
fobicodam fobicodam is offline
Senior Member
 
Join Date: Apr 2006
Location: Argentina
Posts: 346
Thanks: 0
Thanked 1 Time in 1 Post
Send a message via MSN to fobicodam
 
Default

I like this way.. my problem is with the redirection on port 81 to the main domain, but i like the way it is now..
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Statistic not working mzo Installation/Configuration 49 20th April 2011 12:19
webalizer stats not accessible only for one user gilas Installation/Configuration 4 21st July 2006 13:08
Mail Login, simple user names??? Kernal Panic Installation/Configuration 1 16th June 2006 02:45
how to delete user - it's a ghost Cirox Installation/Configuration 3 19th March 2006 22:25
New User question exy123 General 2 9th November 2005 15:38


All times are GMT +2. The time now is 16:06.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.